Skip to content

Commit 6c2473a

Browse files
authored
Ensure that token refresh works correctly for OKE Workload Principal
1 parent b02b2b9 commit 6c2473a

File tree

1 file changed

+9
-7
lines changed

1 file changed

+9
-7
lines changed

src/borneo/iam/iam.py

Lines changed: 9 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,8 @@
2323
# noinspection PyUnresolvedReferences
2424
from oci.auth.signers import InstancePrincipalsSecurityTokenSigner
2525
# noinspection PyUnresolvedReferences
26+
from oci.auth.signers import OkeWorkloadIdentityResourcePrincipalSigner
27+
# noinspection PyUnresolvedReferences
2628
from oci.auth.signers import get_resource_principals_signer
2729
# noinspection PyUnresolvedReferences
2830
from oci.config import from_file
@@ -309,7 +311,6 @@ def set_required_headers(self, request, auth_string, headers,
309311
'Principal the compartment for the operation must be specified.'
310312
)
311313

312-
313314
def set_service_url(self, config):
314315
service_url = config.get_service_url()
315316
if service_url is None:
@@ -440,12 +441,13 @@ def _refresh_task(self):
440441
while True:
441442
try:
442443
# refresh security token before create new signature
443-
if (isinstance(
444-
self._provider,
445-
InstancePrincipalsSecurityTokenSigner) or
446-
isinstance(
447-
self._provider,
448-
EphemeralResourcePrincipalSigner)):
444+
if (
445+
isinstance(self._provider, InstancePrincipalsSecurityTokenSigner)
446+
or isinstance(
447+
self._provider, OkeWorkloadIdentityResourcePrincipalSigner
448+
)
449+
or isinstance(self._provider, EphemeralResourcePrincipalSigner)
450+
):
449451
self._provider.refresh_security_token()
450452

451453
self.get_signature_details_internal()

0 commit comments

Comments
 (0)